0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6

Sharing

Copy URL Twitter E-mail

General

Target
0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6
Size 937KB
Sample221122-b65xhaaa8w
SHA256 0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6
MD5 1837d3bd9d5045be3146f7416dd632f9
SHA1 056392951fe7428c94c36d03d5f499d0525294fa
SHA512 35f3bda200e2feb16fc15df2581cbb2dd2e26510941e6f9ba11ced28c021a1802cdd1007efeae27806a44c20f040ef907c71903b17d906409482e562b22563f5
SSDEEP 24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSNJEh:ybZfGZARViQkA/0TIR3gGvtxmh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6

.exe 937KB

0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6

IMPHASH ea94c30843a9cb4bd71911c511950546
SHA256 0e1eabed04ef4dfa64a958f1336254bb72b6ffea3894da98c38d12b68cc02ff6
MD5 1837d3bd9d5045be3146f7416dd632f9
SHA1 056392951fe7428c94c36d03d5f499d0525294fa
SHA512 35f3bda200e2feb16fc15df2581cbb2dd2e26510941e6f9ba11ced28c021a1802cdd1007efeae27806a44c20f040ef907c71903b17d906409482e562b22563f5
SSDEEP 24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSNJEh:ybZfGZARViQkA/0TIR3gGvtxmh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

418220

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipCloneImage GdipGetImageEncoders GdipGetImageEncodersSize GdiplusShutdown GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipSaveImageToStream GdipDisposeImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdipAlloc GdipFree GdiplusStartup GdipCreateHBITMAPFromBitmap

rpcrt4

UuidCreate

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

msi

ord204

winmm

PlaySoundA

kernel32

FileTimeToLocalFileTime DeleteCriticalSection GetFileAttributesA GetFileSizeEx GetFileTime TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GetModuleHandleW GetCurrentDirectoryA GlobalFlags GetCPInfo GetOEMCP SetErrorMode UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree FindNextFileA ExitProcess GetSystemTimeAsFileTime GetDriveTypeA HeapAlloc GetCommandLineA GetStartupInfoA VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitThread HeapSize SetStdHandle GetFileType HeapCreate VirtualFree SetHandleCount GetStdHandle GetConsoleCP GetConsoleMode GetACP IsValidCodePage LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW CompareStringW SetEnvironmentVariableA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer ReadFile InterlockedIncrement FileTimeToSystemTime GetThreadLocale GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource WritePrivateProfileStringA GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent SetThreadPriority InterlockedDecrement GetModuleFileNameW GlobalDeleteAtom GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GetModuleHandleA GlobalFree GlobalUnlock MulDiv lstrlenA lstrcpynA CreateProcessA SetLastError CreateThread TerminateThread EnterCriticalSection LeaveCriticalSection GetExitCodeThread InitializeCriticalSection LoadLibraryA GetProcAddress FreeLibrary CreateFileA WriteFile RemoveDirectoryA GetTempFileNameA GetTempPathA GetWindowsDirectoryA Sleep GetSystemTime CreateDirectoryA FormatMessageA OutputDebugStringA GetVersionExA GetSystemDirectoryA GlobalAlloc GlobalLock lstrcpyA lstrcatA MultiByteToWideChar WaitForSingleObject DeleteFileA GetUserDefaultUILanguage GetTickCount GetCurrentThread GetCurrentProcess LocalAlloc LocalFree CloseHandle ResumeThread CreateToolhelp32Snapshot GetLastError Process32First Process32Next OpenProcess GetExitCodeProcess TerminateProcess GetModuleFileNameA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateFileW RtlUnwind GetProcessHeap

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA InsertMenuItemA CreatePopupMenu SetRectEmpty TranslateAcceleratorA CharUpperA InflateRect CharNextA RegisterWindowMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos CopyRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient FillRect CreateDialogIndirectParamA DestroyWindow GetNextDlgTabItem EndDialog SetWindowContextHelpId SetRect GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA ReleaseCapture GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem GetWindowTextA GetFocus SetFocus IsWindowEnabled MoveWindow GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetDlgItem GetWindow UnhookWindowsHookEx PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMenu EnableMenuItem GetWindowThreadProcessId IsWindowVisible GetWindowRect ShowWindow CloseWindow GetDesktopWindow DrawFrameControl MessageBoxA GetSysColor PostMessageA GetDC ReleaseDC GetSystemMetrics SetWindowPos GrayStringA DrawTextExA DrawTextA TabbedTextOutA LoadBitmapA GetWindowLongA SetWindowLongA LoadCursorA IsRectEmpty CopyAcceleratorTableA UnregisterClassA SetCapture SetCursor EnableWindow GetSysColorBrush GetMenuItemInfoA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu MapDialogRect GetParent InvalidateRect GetClientRect IsIconic IsWindow GetKeyboardState keybd_event SetForegroundWindow BringWindowToTop SetActiveWindow DrawIcon PtInRect SetTimer KillTimer LoadIconA SendMessageA UpdateWindow GetActiveWindow LoadAcceleratorsA

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush SetWindowOrgEx SetViewportExtEx GetTextColor CreateRectRgnIndirect GetTextExtentPoint32A GetRgnBox ScaleViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetPixel CreateSolidBrush GetDeviceCaps GetCurrentObject DeleteObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetStockObject BitBlt LPtoDP DPtoLP GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor SelectObject CreateCompatibleDC CreateCompatibleBitmap GetObjectA CreateFontIndirectA GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

OpenThreadToken RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA AbortSystemShutdownA RegEnumKeyExA RegQueryInfoKeyA RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCloseKey EnumServicesStatusA OpenProcessToken DuplicateToken InitializeSecurityDescriptor GetLengthSid InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner IsValidSecurityDescriptor AccessCheck AllocateAndInitializeSid CheckTokenMembership FreeSid OpenSCManagerA

shell32

ShellExecuteA Shell_NotifyIconA DragFinish DragQueryFileA SHGetFolderPathA

comctl32

ord17

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA UrlUnescapeA AssocQueryStringA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes CoTaskMemFree StringFromCLSID CreateStreamOnHGlobal CoInitializeEx CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes

oleaut32

VariantCopy VariantChangeType SysAllocStringLen SysAllocStringByteLen SysStringLen SysFreeString VariantInit SafeArrayCreateVector SysAllocString SafeArrayAccessData VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayUnaccessData SafeArrayDestroy OleCreateFontIndirect VariantClear

urlmon

ObtainUserAgentString URLDownloadToFileA

wininet

HttpOpenRequestA InternetConnectA HttpSendRequestA InternetReadFile InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetGetLastResponseInfoA HttpQueryInfoA HttpAddRequestHeadersA DeleteUrlCacheEntry InternetCanonicalizeUrlA InternetOpenUrlA InternetCloseHandle InternetQueryDataAvailable InternetOpenA InternetCrackUrlA